Sam
2015-Apr-03 14:53 UTC
[Samba] samba 4 joining a Windows 2003 srv / Sync and DNS problems
hello, After a lot of different approach to move from an old windows 2000 server AD to samba4, my last try seems nearly good now... I did this : - Preparing the old DC with adprep commands - add DNS and AD roles in a new temporary win 2003srv - add this new server as an AD controller - transfer all roles to win2003 with ntdsutil command - demote win2000 - put the AD domain and forest functional level to 2003 - move _msdcs in the DNS management tool as described here (http://support.microsoft.com/kb/817470/en-us) - adjust all zones with "Nonsecure and secure" Dynamic updates - adjust all zones with Replication "To all DNS servers in the active directory forest ariane.intra" - join a new sernet samba4 server. A lot of things works, I can use rsat tools for managing the dns and the AD users of Samba4. But some things disturbing me... Replication works only in one way during Samba4 join I had see that : descriptor_sd_propagation_recursive: DC=DomainDnsZones,DC=ariane,DC=intra not found under DC=ariane,DC=intra descriptor_sd_propagation_recursive: DC=ForestDnsZones,DC=ariane,DC=intra not found under DC=ariane,DC=intra and now if I do a "samba-tool drs showrepl" command, I thinks it missings these parts ( DomainDnsZones and ForestDnsZones) in OUTBOUND sections : root at S4:~# samba-tool drs showrepl Premier-Site-par-defaut\S4 DSA Options: 0x00000001 DSA object GUID: 1092bc64-4165-4e98-9aa7-97a71481fef4 DSA invocationId: f36fc4a1-714c-4906-962c-49f713337271 ==== INBOUND NEIGHBORS === DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 16:36:58 2015 CEST DC=DomainDnsZones,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 16:36:58 2015 CEST CN=Configuration,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 16:36:58 2015 CEST CN=Schema,CN=Configuration,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 16:36:58 2015 CEST DC=ForestDnsZones,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 16:36:58 2015 CEST ==== OUTBOUND NEIGHBORS === DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 15:22:18 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 15:22:18 2015 CEST CN=Configuration,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 15:22:18 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 15:22:18 2015 CEST CN=Schema,CN=Configuration,DC=ariane,DC=intra Premier-Site-par-defaut\W2003 via RPC DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d Last attempt @ Fri Apr 3 15:22:23 2015 CEST was successful 0 consecutive failure(s). Last success @ Fri Apr 3 15:22:23 2015 CEST ==== KCC CONNECTION OBJECTS === Connection -- Connection name: d4f5908c-c251-43e3-9c5d-1f29e68b3a1b Enabled : TRUE Server DNS name : w2003.ariane.intra Server DN name : CN=NTDS Settings,CN=W2003,CN=Servers,CN=Premier-Site-par-defaut,CN=Sites,CN=Configuration,DC=ariane,DC=intra TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection! What can I do on the win2003 Ad to fix this? Thanks all! Samuel